CVE Field Guide
About Us
CVE-2025-15319
PUBLISHED
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Assigner:
Tanium
Reserved:
29.12.2025
Published:
09.02.2026
Updated:
09.02.2026
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score:
7.8
CVSS score
7.8
Attack Vector
Local
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
Low
Integrity Impact
High
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
Tanium
Product
Patch Endpoint Tools
Versions
affected from 3.17.0 to 3.17.10207 (excl.)
affected from 10.1.0 to 10.1.50 (excl.)
affected from 10.7.0 to 10.7.25 (excl.)
affected from 10.9.0 to 10.9.31 (excl.)
affected from 10.11.0 to 10.11.27 (excl.)
Credits
Owen Jeanes
reporter
References
TAN-2025-021
Problem Types
Improper Link Resolution Before File Access ('Link Following')
CWE